Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227021	7.5	危険	virtual design studios	-	Virtual Design Studio vlbook の include/global.inc.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2073	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

227022	4.3	警告	virtual design studios	-	Virtual Design Studio vlbook の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2072	2012-12-20 18:52	2008-05-5	Show	GitHub Exploit DB Packet Storm

227023	4.3	警告	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2068	2012-12-20 18:52	2008-04-25	Show	GitHub Exploit DB Packet Storm

227024	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Jokes Site Script の jokes.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2065	2012-12-20 18:52	2008-05-2	Show	GitHub Exploit DB Packet Storm

227025	10	危険	phpgedview	-	PhpGedView における脆弱性	CWE-noinfo 情報不足	CVE-2008-2064	2012-12-20 18:52	2008-05-2	Show	GitHub Exploit DB Packet Storm

227026	4.3	警告	softpedia	-	Softpedia SiteXS CMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2046	2012-12-20 18:52	2008-05-1	Show	GitHub Exploit DB Packet Storm

227027	5	警告	SugarCRM	-	SugarCRM Sugar Community Edition における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2045	2012-12-20 18:52	2008-04-10	Show	GitHub Exploit DB Packet Storm

227028	6.5	警告	turnkey solutions	-	Turnkey Web Tools SunShop Shopping Cart の admin/adminindex.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2038	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

227029	7.5	危険	Mike Jolley	-	WordPress 用の Download Monitor プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2034	2012-12-20 18:52	2008-04-30	Show	GitHub Exploit DB Packet Storm

227030	7.5	危険	WordPress.org	-	WordPress 用の Spreadsheet プラグインの ss_load.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-1982	2012-12-20 18:52	2008-04-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211871	6.1	MEDIUM Network	wuzhicms	wuzhi_cms	XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.php.	CWE-79 Cross-site Scripting	CVE-2019-9109	2024-11-21 13:51	2019-02-25	Show	GitHub Exploit DB Packet Storm

211872	7.5	HIGH Network	flexera	flexnet_publisher	A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool.	NVD-CWE-noinfo	CVE-2019-8963	2024-11-21 13:50	2023-03-30	Show	GitHub Exploit DB Packet Storm

211873	8.8	HIGH Network	webkitgtk wpewebkit redhat	webkitgtk wpe_webkit enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_for_scientific_computing enterprise_linux_server enterprise_linux_for_power_little_endian…	A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple m…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-8720	2024-11-21 13:50	2023-03-7	Show	GitHub Exploit DB Packet Storm

211874	5.3	MEDIUM Network	pilz	pmc	In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-9011	2024-11-21 13:50	2022-12-27	Show	GitHub Exploit DB Packet Storm

211875	9.8	CRITICAL Network	apple	iphone_os mac_os_x watchos tvos	This issue was addressed with improved entitlements. This issue is fixed in watchOS 6, tvOS 13, macOS Catalina 10.15, iOS 13. An application may be able to gain elevated privileges.	NVD-CWE-noinfo	CVE-2019-8703	2024-11-21 13:50	2021-12-24	Show	GitHub Exploit DB Packet Storm

211876	5.5	MEDIUM Local	apple	mac_os_x tvos iphone_os	This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra, iOS 12.4, tvOS 12.4. A local user …	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2019-8702	2024-11-21 13:50	2021-12-24	Show	GitHub Exploit DB Packet Storm

211877	9.8	CRITICAL Network	apple	mac_os_x	CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14. Description: A logic issue was addressed with improved state management..	NVD-CWE-noinfo	CVE-2019-8643	2024-11-21 13:50	2021-12-24	Show	GitHub Exploit DB Packet Storm

211878	8.8	HIGH Adjacent	bluez debian	bluez debian_linux	A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data…	CWE-787 Out-of-bounds Write	CVE-2019-8922	2024-11-21 13:50	2021-11-29	Show	GitHub Exploit DB Packet Storm

211879	6.5	MEDIUM Adjacent	bluez debian	bluez debian_linux	An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to tric…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2019-8921	2024-11-21 13:50	2021-11-29	Show	GitHub Exploit DB Packet Storm

211880	7.5	HIGH Network	cmsmadesimple	cms_made_simple	An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module (in the file action.setdefaulttemplate.php) with the m1_filename …	CWE-22 Path Traversal	CVE-2019-9060	2024-11-21 13:50	2021-09-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed